Swakhil
12/16/2022, 5:47 AMdetail_query_network_interface expected single result, got 0
and the second error is software data is not reflecting on the fleet software dashboard and displays the below error in the logs.
{"component":"service","err":"detail_query_network_interface expected single result, got 0","method":"IngestFunc","ts":"2022-12-15T11:58:41.396213187Z"}
{"hostID":1,"level":"error","message":"distributed query is denylisted","query":"fleet_detail_query_software_windows","ts":"2022-12-15T11:58:41.396500965Z"}
{"err":"failed","level":"error","op":"directIngestSoftware","ts":"2022-12-15T11:58:41.396717347Z"}
{"level":"warn","op":"directIngestWindowsUpdateHistory","skipped":"KB id not found in HP Development Company, L.P. - SoftwareComponent - 8.10.28.1","ts":"2022-12-15T11:58:41.400430479Z"}
The last line of the above error KB id not found
displays the same for all the available softwares on that machine. currently I use v4.23.0.Lucas Rodriguez
12/16/2022, 4:29 PMselect
ia.address,
id.mac
from
interface_addresses ia
join interface_details id on id.interface = ia.interface
join routes r on r.interface = ia.address;
1. re fleet_detail_query_software_windows
being denylisted: Do you happen to have Python packages installed on the Windows host? (If not, what kind of software does it have installed? how many users does the host have?)
2. re directIngestWindowsUpdateHistory
: I'll open an issue for this. It seems the title of that particular Windows Update doesn't contain the KB number?...Swakhil
12/19/2022, 12:33 PMRaghavendra Hiremath
12/20/2022, 9:40 AMSwakhil
12/20/2022, 10:00 AMRaghavendra Hiremath
12/20/2022, 10:07 AMlocation / {
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header Host $host;
proxy_pass <http://ws-backend>;
proxy_http_version 1.1;
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Connection "upgrade";
}
}
For proxy_pass: should we add our fleet FQDN?
example: proxy_pass <http://FLEET_FQDN>;
Swakhil
12/20/2022, 10:19 AMRaghavendra Hiremath
12/20/2022, 10:21 AMSwakhil
12/20/2022, 10:27 AMRaghavendra Hiremath
12/20/2022, 10:35 AMSwakhil
12/20/2022, 10:38 AM./fleet serve \
--mysql_address=127.0.0.1:3306 \
--mysql_database=fleet \
--mysql_username=root \
--mysql_password=test@001 \
--redis_address=127.0.0.1:6379 \
--server_address=0.0.0.0:443 \
--server_cert=/etc/ssl/cert-key/server.cert \
--server_key=/etc/ssl/cert-key/server.key \
--osquery_result_log_plugin=stdout \
--osquery_status_log_plugin=stdout \
--logging_json
Raghavendra Hiremath
12/20/2022, 10:40 AMSwakhil
12/20/2022, 10:42 AMRaghavendra Hiremath
12/20/2022, 10:45 AMLucas Rodriguez
12/20/2022, 8:25 PMTried running the query on the host, but nothing was returning. Finally, Installed latest version v4.24.1 which worked perfectly fine.@Swakhil So the issue was resolved by updating?